Senior Infrastructure Engineer

Senior Infrastructure Engineer – National Capital Region (Pentagon, Falls Church, and Fairfax) This position is contingent upon contract award. The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational warfighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts. The Senior Infrastructure Engineer serves as a senior-level infrastructure architect and practitioner responsible for the design, provisioning, hardening, and sustained operation of WDP Core Integration's multi-enclave system environments across the full Development-through-Production lifecycle. This role integrates Infrastructure-as-Code engineering, DevSecOps pipeline operations, and continuous monitoring capabilities to deliver consistent, secure, and mission-ready infrastructure states across WDP's Unclassified, Secret, and Top Secret environments in direct support of Joint Force decision advantage objectives. Responsibilities Designs, provisions, and maintains War Data Platform (WDP) Core Integration system environments supporting DoW missions, Joint Staff analysts, Combatant Command elements, and Senior Executive Service leadership. Builds and maintains development, test, staging, integration, and production environments across classified and unclassified cloud enclaves using Infrastructure-as-Code and configuration management tooling. Develops IaC and CaC modules supporting pipelines, shared platform services, sandbox environments, and mission application stacks. Applies STIG baselines, classification-specific controls, and DevSecOps security requirements across all environments to maintain operational integrity and mission assurance. Constructs and operates DevSecOps pipelines integrating static analysis, secret scanning, vulnerability assessments, artifact validation, and automated deployment workflows. Implements monitoring, observability, and alerting using Prometheus, Grafana, Elastic Stack, and SIEM platforms to maintain visibility into system health, performance, and security posture. Coordinates capacity planning, resource scaling, backup operations, disaster-recovery procedures, and environment-hardening activities. Supports incident-response operations by analyzing telemetry, validating remediation actions, and restoring environment stability. Serves as a liaison between development, security, and operations teams to align infrastructure capabilities with mission objectives, sprint commitments, and release schedules. Produces mission-critical deliverables including IaC/CaC modules, environment baselines, monitoring dashboards, incident-response artifacts, and environment-readiness reports supporting operational resilience and sustained program value across the WDP Core Integration ecosystem. Performs other duties as assigned. Required Skills Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI). A minimum of 10 years of experience in infrastructure engineering, systems engineering, or a closely related discipline within a federal, defense, or government contracting environment, with demonstrated experience supporting secure multi‑environment infrastructure operations across federal or defense cloud environments, including classified and unclassified systems. Demonstrated hands‑on proficiency developing and maintaining Infrastructure-as-Code and Configuration-as-Code solutions using tools such as Terraform, Ansible, Helm, or comparable IaC/CaC frameworks, including the ability to design reusable modules supporting pipelines, application stacks, and classified mission environments with STIG‑hardened, DevSecOps‑integrated configurations. Proven experience supporting DevSecOps pipelines incorporating security scanning, artifact validation, automated deployment workflows, and operational monitoring integrations. Experience supporting incident‑response operations in a classified government or defense environment, including telemetry analysis, remediation validation, environment restoration, and the production of structured after‑action artifacts in support of ongoing operational resilience and authorization compliance requirements. Strong problem‑solving and decision‑making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution. Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end‑users to executive management). Desired Skills Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Familiarity with DoW Security Technical Implementation Guide (STIG) application, the DoW Risk Management Framework (RMF), and the transition toward the Cybersecurity and Risk Management Continuum (CSRMC), including demonstrated experience applying classification‑specific security controls and continuous monitoring requirements across IL4, IL5, IL6, and JWICS infrastructure environments. Experience supporting cloud infrastructure engineering within DoW-accredited IL4/IL5 cloud environments, including proficiency with commercial cloud platforms such as AWS GovCloud or Azure Government, and hands‑on experience developing cloud reference architectures, brokerage services, and IaC‑driven enclave provisioning aligned to DoW cloud adoption standards. Familiarity with Zero Trust architecture principles as applied to infrastructure engineering, including network micro‑segmentation, identity‑based access enforcement, identity‑centric access controls, network segmentation, encrypted communications, and continuous monitoring practices. Demonstrated experience operating within Agile or Scaled Agile Framework (SAFe) delivery models, including the ability to contribute infrastructure engineering activities such as environment provisioning, pipeline updates, capacity planning, and operational readiness with Agile or SAFe delivery models. ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. #J-18808-Ljbffr